Is SSO integrated with IGA provisioning?
Yes. Application tiles are driven by IGA assignments and the SCIM 2.0 gateway provisions SSO access as part of the identity lifecycle.
Problems We Solve
From Pain to Platform Outcomes
Challenge: Users manage dozens of passwords
AI Tech Secure: SSO Launch Dashboard with IGA-driven app tiles
Challenge: MFA fatigue on every login
AI Tech Secure: Adaptive MFA — step-up only when risk warrants
Challenge: Helpdesk flooded with resets
AI Tech Secure: Self-service password management portal
Challenge: No visibility into auth risk
AI Tech Secure: Risk Dashboard with device and session signals
Challenge: SSO disconnected from provisioning
AI Tech Secure: SCIM gateway and IGA assignment sync
🚪
SSO Launch Dashboard
Application tiles driven by IGA assignments giving every user one login for SAP, Microsoft 365, Salesforce, ServiceNow, and hundreds more via SAML 2.0, OIDC, and OAuth 2.0.
Get Demo →Key Capabilities
✓IGA-driven application tiles
✓SAML 2.0, OIDC, OAuth 2.0
✓200+ pre-built connectors
✓SAP SSO (IAS, Kerberos)
✓Custom app onboarding (15 min)
✓SSO health monitoring
Key Capabilities
✓Risk-based step-up MFA
✓TOTP and push notification
✓FIDO2 / WebAuthn hardware tokens
✓Geolocation and device fingerprinting
✓Impossible travel detection
✓Policy per application
🛡️
Adaptive MFA Policies
Step-up authentication based on risk — new device, unusual location, off-hours login, or high-value transactions. TOTP, push, FIDO2/WebAuthn, and SMS fallback.
Get Demo →⚙️
ATS Identity Provider Management
ATS-owned identity plane with organisation setup, application registration, policy configuration, multi-tenant architecture, and external IdP federation.
Get Demo →Key Capabilities
✓Organisation and project management
✓SAML/OIDC client registration
✓Multi-tenant architecture
✓ADFS, Azure AD, Google federation
✓API and M2M tokens
✓Identity provisioning sync
Key Capabilities
✓Self-service password reset (SSPR)
✓AD, Azure AD, SAP password sync
✓Password policy enforcement
✓SCIM 2.0 provisioning gateway
✓Browser extension rollout
✓Helpdesk-initiated reset audit
🔑
Password Manager & SCIM Gateway
Self-service password reset eliminating helpdesk calls, plus SCIM 2.0 provisioning server integrating SSO with IGA lifecycle automation.
Get Demo →📊
Risk Dashboard & Connector Marketplace
Real-time authentication event feed, failed login detection, high-risk session blocking, and 200+ maintained application connectors with health monitoring.
Get Demo →Key Capabilities
✓Real-time auth event feed
✓Brute-force detection
✓High-risk session blocking
✓Login trend analytics
✓SIEM export (Splunk, Sentinel)
✓Connector health alerts
How It Integrates
Connector Factory → Module → IGA Warehouse
Every module pulls fine-grained ERP permissions through the Connector Factory and writes outcomes back to the unified identity warehouse for certification, SoD, and audit evidence.
ORCHESTRATION
Connector Factory
MODULE
Enterprise SSO & MFA
UNIFIED DATA
IGA Warehouse
📊 Outcomes
Measurable Results from Day One
200+
Connectors
15 min
App Onboarding
99.9%
Availability
Zero
Password Tickets
🔗 Integrations
ATS Identity Plane
Microsoft Azure AD / Entra
Active Directory / ADFS
SAP IAS
Google Workspace
SCIM 2.0
✅ Common Use Cases
→Enterprise-wide SSO rollout
→Microsoft 365 + SAP unified login
→Zero-trust authentication
→Helpdesk password reset elimination
→Contractor SSO with time limits
→IGA-driven app provisioning
FAQ
Frequently Asked Questions
What authentication protocols are supported?
SAML 2.0, OIDC, and OAuth 2.0 with 200+ pre-built connectors and a custom SAML/OIDC connector builder.
How does adaptive MFA reduce friction?
MFA steps up only when risk signals warrant it — new device, unusual location, or high-value access — rather than on every login.
Related products
Unify Enterprise SSO — Book a Demo
Book a personalised demo tailored to your ERP landscape and audit goals.